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REMARKS 

Claims 1-81 are pending in the Application. Claims 9, 14, 21, 27, 36, 41, 48, 
49, 54, 63, 68, 75, 76 and 81 are rejected under 35 U.S.C. §112, second paragraph. 
Claims 1-8, 10-13, 15-20, 22, 23, 28-35, 37-40, 42-47, 49, 50, 55-62, 64-67, 69-74 
and 76-77 are rejected under 35 U.S.C. §102(b). Applicant respectfully traverses 
these rejections for at least the reasons stated below and respectfully requests the 
Examiner to reconsider and withdraw these rejections. 

I. REJECTIONS UNDER 35 U.S.C. $112: 

The Examiner has rejected claims 9, 14, 21, 27, 36, 41, 48, 49, 54, 63, 68, 75, 
76 and 81 under 35 U.S.C. §112, second paragraph, as being indefinite for failing to 
particularly point out and distinctly claim the subject matter which Applicant regards 
as the invention. Paper No. 8, page 5. In particular, the Examiner states: 

Claims 9, 14, 21, 27, 36, 41, 48, 54, 63, 68, 75, 81 recite the limitation 
of "logging off said user with first level of access, wherein said 
underlying operating system logs on said user with said second level 
of access" which renders the claim indefinite because it is unclear 
which level of access the user possesses. Paper No. 8, page 2. 

Apphcant respectfully traverses the assertion that claims 9, 14, 21, 27, 36, 41, 48, 54, 
63, 68, 75 and 81 are indefinite. Applicant respectfully contends that the scope of the 
claimed subject matter in claims 9, 14, 21, 27, 36, 41, 48, 54, 63, 68, 75, 81 can be 
determined by one having ordinary skill in the art. Applicant respectfully directs the 
Examiner's attention to at least page 10, lines 18-30; page 12, lines 7-23 and page 14, 
lines 1 1-26 of the Specification as support for the above-cited claimed subject matter. 
Consequently, the scope of the above-cited claimed subject matter can be determined 
by one having ordinary skill in the art. 



2 



RPS9-2000-0052US1 



PATENT 



The Examiner has not provided any evidence that a person of ordinary skill in 
the art would not be able to determine the scope of the above-cited claimed subject 
matter. A rejection under 35 U.S.C. §112, second paragraph, is not appropriate, when 
the scope of the claimed subject matter can be determined by one having ordinary 
skill in the art. M.P.E.P. § 706.03(d). As stated above, one having ordinary skill in 
the art can determine the scope of the claimed subject matter in claims 9, 14, 21, 27, 
36, 41, 48, 54, 63, 68, 75 and 81. Consequently, AppUcant respectfully asserts that 
claims 9, 14, 21, 27, 36, 41, 48, 54, 63, 68, 75 and 81 are allowable under 
35 U.S.C. §112, second paragraph, and respectfully requests the Examiner to 
withdraw the rejections of claims 9, 14, 21, 27, 36, 41, 48, 54, 63, 68, 75 and 81 
under 35 U.S.C. §112, second paragraph. 

Further, the purpose of the claim is not to explain technology or how it works. 
S3 Inc. V. nVIDIA Corp., 59 U.S.P.Q.2d 1745, 1748 (Fed. Cir. 2001). The purpose is 
to state the legal boundaries of the patent grant. Id. As understood by the Applicant, 
the Examiner is rejecting claims 9, 14, 21, 27, 36, 41, 48, 54, 63, 68, 75 and 81 under 
35 U.S.C. §112, second paragraph, for not explaining how it works. This is not an 
appropriate rationale for rejecting claims 9, 14, 21, 27, 36, 41, 48, 54, 63, 68, 75 and 
81 under 35 U.S.C. §112, second paragraph. As stated above, the question that the 
Examiner must address in a rejection under 35 U.S.C. §112, second paragraph, is 
whether the scope of the claimed subject matter can be determined by one having 
ordinary skill in the art. M.P.E.P. § 706.03(d). Since one having ordinary skill in the 
art can determine the scope of the claimed subject matter in claims 9, 14, 21, 27, 36, 
41, 48, 54, 63, 68, 75 and 81, claims 9, 14, 21, 27, 36, 41, 48, 54, 63, 68, 75 and 81 
are allowable under 35 U.S.C. §112, second paragraph. 

The Examiner further states: 

Claims 22, 49, 76, recite "comparing said logon input with an 
underlying operating system security database, wherein if said 
underlying operating system security database does not verify said 
user with access to said second level of access, then... requesting from 
said user a logon identification and comparing said logon 
identification with said underlying operating system security database" 
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which renders the claim indefinite because process is circular in 
nature. If the user is not authorized to a second level of access the 
application fi"amework is just going to keep requesting re-entry of the 
user information. Paper No. 8, page 2. 

Applicant respectfully traverses the assertion that claims 22, 49 and 76 are indefinite. 
Applicant respectfiiUy contends that the scope of the claimed subject matter in claims 
22, 49 and 76 can be determined by one having ordinary skill in the art. Applicant 
respectfiiUy directs the Examiner's attention to at least page 14, line 16 - page 15, line 
11 of the Specification as support for the above-cited claimed subject matter. 
Consequently, the scope of the above-cited claimed subject matter can be determined 
by one having ordinary skill in the art. 

The Examiner has not provided any evidence that a person of ordinary skill in 
the art would not be able to determine the scope of the above-cited claimed subject 
matter. A rejection under 35 U.S.C. §112, second paragraph, is not appropriate, when 
the scope of the claimed subject matter can be determined by one having ordinary 
skill in the art. M.P.E.P. § 706.03(d). As stated above, one having ordinary skill in 
the art can determine the scope of the claimed subject matter in claims 22, 49 and 76. 
Consequently, Applicant respectfiiUy asserts that claims 22, 49 and 76 are allowable 
under 35 U.S.C. §112, second paragraph, and respectfiiUy requests the Examiner to 
withdraw the rejections of claims 22, 49 and 76 under 35 U.S.C. §112, second 
paragraph. 

As understood by the Applicant, the Examiner is rejecting claims 22, 49 and 
76 because the Examiner thinks there is necessarily a repeat of the steps which, in his 
opinion, would cause the claims to have an unclear meaning even though there is no 
language in these claims that indicate a repetition of the steps. The Examiner is 
adding limitations to the above-cited claim limitation that are not recited . Instead, 
the Examiner should be determining whether the scope of the claimed subject matter 
(the claim limitations as written) can be determined by one having ordinary skill in 
the art. M.P.E.P. § 706.03(d). Since one having ordinary skiU in the art can 
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determine the scope of the claimed subject matter in claims 22, 49 and 76, claims 22, 
49 and 76 are allowable xinder 35 U.S. C. §1 12, second paragraph. 

IL REJECTIONS UNDER 35 U.S.C. $102fe): 

The Examiner has rejected claims 1-81 under 35 U.S.C. § 102(e) as being 
anticipated by He (U.S. Patent No. 5,944,824). Applicant respectfully traverses these 
rejections for at least the reasons stated below and respectfully requests that the 
Examiner reconsider and withdraw these rejections. 

For a claim to be anticipated under 35 U.S.C. §102, each and every claim 
limitation must be foxmd within the cited prior art reference and arranged as required 
by the claim. M.P.E.P. §2131. 

Applicant respectfully asserts that He does not disclose "providing an 
application framework, wherein said application framework logs on a user with a first 
level of access in said xmderlying operating system" as recited in claim 1 and 
similarly in claims 28 and 55. The Examiner cites column 2, line 25 - 32 of He as 
disclosing the above-cited claim limitation. Paper No. 8, page 6. Applicant 
respectfully traverses and asserts that He instead discloses a single sign-on that allows 
a user to log-on only once at a user station and a security server that will, in tum, 
automatically log the user on to all the network elements that the user is authorized to 
access. There is no language in the cited passage that discloses an application 
framework. Neither is there any language in the cited passage that discloses an 
application framework that logs a user in the underlying operation system. Neither is 
there any language in the cited passage that discloses an application framework that 
logs a user with a first level of access in the underlying operation system. Thus, He 
does not disclose all of the limitations of claims 1, 28 and 55, and thus He does not 
anticipate claims 1, 28 and 55. M.P.E.P. §2131. 

Applicant further asserts that He does not disclose "generating an application 
framework sign-on screen" as recited in claim 1 and similarly in claims 28 and 55. 
The Examiner cites column 2, line 25 - 32 of He as disclosing the above-cited claim 
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limitation. Paper No. 8, page 6. Applicant respectfully traverses. As stated above, 
He instead discloses a single sign-on that allows a user to log-on only once at a user 
station and a security server that will, in turn, automatically log the user on to all the 
network elements that the user is authorized to access. As stated above, there is no 
language in the cited passage that discloses an application framework. Neither is 
there any language in the cited passage that discloses an application framework sign- 
on screen. The cited passage does disclose the term "single sign-on" but there is no 
language in the cited passage that discloses a sign-on screen. Thus, He does not 
disclose all of the limitations of claims 1, 28 and 55, and thus He does not anticipate 
claims 1, 28 and 55. M.P.E.P. §2131. 

Applicant ftirther asserts that He does not disclose "entering a logon input on 
said generated application framework sign-on screen" as recited in claim 1 and 
similarly in claims 28 and 55. The Examiner cites column 2, line 25 - 32 of He as 
disclosing the above-cited claim limitation. Paper No. 8, page 6. Applicant 
respectfully traverses. As stated above, He instead discloses a single sign-on that 
allows a user to log-on only once at a user station and a security server that will, in 
turn, automatically log the user on to all the network elements that the user is 
authorized to access. As stated above, there is no language in the cited passage that 
discloses an application framework. Neither is there any language in the cited 
passage that discloses an application framework sign-on screen. Neither is there any 
language in the cited passage that discloses entering a login input on the generated 
application framework sign-on screen. The cited passage does disclose the term 
"single sign-on" but there is no language in the cited passage that discloses a sign-on 
screen or entering a login input on the sign-on screen. Thus, He does not disclose all 
of the limitations of claims 1, 28 and 55, and thus He does not anticipate claims 1, 28 
and 55. M.P.E.P. §2131. 

Applicant further asserts that He does not disclose "comparing said logon 
input with an application framework security database to determine level of access" 
as recited in claim 1 and similarly in claims 28 and 55. The Examiner cites colunm 5, 
lines 8-15 of He as disclosing the above-cited claim limitation. Paper No. 8, page 7. 
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Applicant respectfully traverses. He instead discloses that a request is sent to a user 
station requesting a user identifier and a password. Column 5, lines 7-9. He further 
discloses that the xiser information will be checked against the information in the user 
profile of a central security database at a security server. Column 5, lines 9-11. He 
further discloses that a network establishes mutual trust between an authenticated user 
and a specific mutual trust between an authenticated user and a specific NE the user 
requests to access. Column 5, lines 11-13. He further discloses that the network 
authentication assures the user that the correct NE is accessed. Column 5, lines IS- 
IS. However, there is no language in the cited passage that discloses comparing login 
input with a database to determine the level of access . Thus, He does not disclose all 
of the limitations of claims 1, 28 and 55, and thus He does not anticipate claims 1, 28 
and 55. M.P.E.P. §2131. 

Claims 2-27, 29-54 and 56-81 each recite combinations of features including 
the above combinations, and thus are not anticipated for at least the above-stated 
reasons. Claims 2-27, 29-54 and 56-81 recite additional features, which, in 
combination with the features of the claims upon which they depend are not 
anticipated by He. 

For example, He does not disclose "selecting an indication of said first level 
of access" as recited in claim 2 and similarly in claims 29 and 56. The Examiner cites 
colunm 5, lines 8-15 of He as disclosing the above-cited claim limitation. Paper No. 
8, page 7. Applicant respectfully traverses. As stated above. He instead discloses 
that a request is sent to a user station requesting a user identifier and a password. 
Column 5, lines 7-9. He further discloses that the user information will be checked 
against the information in the user profile of a central security database at a security 
server. Column 5, lines 9-11. He further discloses that a network estabUshes mutual 
trust between an authenticated user and a specific mutual trust between an 
authenticated user and a specific NE the user requests to access. Column 5, lines 11- 
13. He further discloses that the network authentication assures the user that the 
correct NE is accessed. Column 5, lines 13-15. However, there is no language in the 
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cited passage that discloses selecting an indication of a first level of access . 
Similarly, there is no language in the cited passages that discloses selecting an 
indication of a second level of access . There is no indication to be selected where the 
indication corresponds to either a first or a second level of access. Instead, He 
discloses assuring the user that the correct network element is accessed. Thus, He 
does not disclose all of the limitations of claims 2, 29 and 56, and thus He does not 
anticipate claims 2, 29 and 56. M.P.E.P. §2131. 

Applicant fiirther asserts that He does not disclose "wherein said user is 
logged onto said underlying operating system and an application environment with 
said first level of access thereby bypassing said initial sign-on screen of said 
underlying operating system with said single sign-on" as recited in claim 3 and 
similarly in claims 30 and 57. The Examiner cites colunm 5, lines 8-15 of He as 
disclosing the above-cited claim limitation. Paper No. 8, page 7. Applicant 
respectfiiUy traverses. As stated above. He instead discloses assuring the user that the 
correct network element is accessed. There is no language in the cited passage that 
discloses logging onto an underlying operating system and an application 
environment. Neither is there any language in the cited passage that discloses logging 
onto an underlying operating system and an application environment with a first level 
of access. Neither is there any language in the cited passage that discloses logging 
onto an underlying operating system and an application environment with a first level 
of access thereby bypassing an initial sign-on screen of the underlying operating 
system with the single sign-on. Thus, He does not disclose all of the limitations of 
claims 3, 30 and 57, and thus He does not anticipate claims 3, 30 and 57. M.P.E.P. 
§2131. 

Applicant fiirther asserts that He does not disclose "wherein if said logon 
input is not entitled to a second level of access according to said application 
framework security database, then said user is logged onto an application 
environment and said underlying operating system as said first level of access" as 
recited in claim 4 and similarly in claims 31 and 58. Applicant fiirther asserts that He 
does not disclose "wherein if said logon input is not entitled to a second level of 
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access according to said application framework security database, then an indication 
of said second level of access will not be generated to said user, wherein said user is 
restricted to said first level of access" as recited in claim 10 and similarly in claims 37 
and 64. Applicant further asserts that He does not disclose "wherein if said logon 
input is not entitled to said second level of access according to said application 
framework security database, then said user is restricted to said first level of access" 
as recited in claim 16 and similarly in claims 43 and 70. Applicant further asserts 
that He does not disclose "wherein if said underlying operating system security 
database does not verify said user with access to said second level of access, then said 
user is restricted to said first level of access" as recited in claim 24 and similarly in 
claims 51 and 78. The Examiner cites column 5, lines 41-58 and column 8, lines 40- 
65 of He as disclosing the above-cited claim limitations. Paper No. 8, page 8. 
Applicant respectfiiUy traverses. 

He instead discloses a user privilege determines the set of network elements a 
user can access. Column 5, lines 41-42. He further discloses that the network 
element password recovery for a user requires the presence and authority of a "super 
user" to a network element. Colunm 8, Unes 40-41. 

None of this language discloses logging a user onto an application 
environment and an iinderlying operating system as a first level of access. Neither 
does this language disclose logging a user onto an application environment and an 
underlying operating system as a first level of access if the logon input is not entitled 
to a second level of access according to an application framework security database. 
Neither does this language disclose not generating an indication of a second level of 
access. Neither does this language disclose not generating an indication of a second 
level of access if the logon input is not entitled to a second level of access according 
to an application framework security database. Neither does this language disclose 
that the user is restricted to a first level of access. Neither does this language disclose 
that the user is restricted to a first level of access if the login input is not entitled to a 
second level of access according to an application framework security database. 
Neither does this language discloses that if the underlying operating system security 
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database does not verify the user with access to the second level of access, then the 
user is restricted to the first level of access. Thus, He does not disclose all of the 
limitations of claims 4, 10, 16, 24, 31, 37, 43, 51, 58, 64, 70 and 78, and thus He does 
not anticipate claims 44, 10, 16, 24, 31, 37, 43, 51, 58, 64, 70 and 78. M.P.E.P. 
§2131. 

Applicant further asserts that He does not disclose "executing a switch user 
program to switch said user to said second level of access" as recited in claim 6 and 
similarly in claims 34 and 61. Applicant further asserts that He does not disclose 
"executing a switch user program to switch said user to said second level of access" 
as recited in claim 17 and similarly in claims 44 and 71. Applicant further asserts that 
He does not disclose "comparing said logon input with an xmderlying operating 
system security database, wherein if said underlying operating system security 
database verifies said user with access to said second level of access, then said switch 
user program switches said user to said second level of access" as recited in claim 19 
and similarly in claims 46 and 73. Applicant further asserts that He does not disclose 
"comparing said logon input with an underlying operating system security database, 
wherein if said underlying operating system security database does not verify said 
user with access to said second level of access, then the method further comprises the 
step of: requesting fi-om said user a logon identification; and comparing said logon 
identification with said underlying operating system security database" as recited in 
claim 22 and similarly in claims 49 and 76. Applicant fiirther asserts that He does not 
disclose "wherein if said underlying operating system security database verifies said 
user with access to said second level of access, then said switch user program 
switches said user to said second level of access" as recited in claim 25 and similarly 
in claims 52 and 79. The Examiner cites column 8, lines 51-54 as disclosing the 
above-cited claim limitations. Paper No. 8, page 8. Applicant respectfully traverses. 

He instead discloses that the security control on the different types of super 
users is the same as that for the ordinary users except that these users are granted 
more privileges to perform administrative functions in a network element. Colunm 8, 
lines 49-52. 
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None of this language discloses executing a program to switch user to a 
second level of access. Neither does this language disclose comparing logon input 
with an xmderlying operating system secxirity database. Neither does this language 
disclose that if the underlying operating system security database verifies the user 
with access to the second level of access, then the switch user program switches the 
user to the second level of access. Neither does this language disclose that if the 
underlying operating system security database does not verify the user with access to 
the second level of access, then a logon identification is requested fi-om the user; and 
the logon identification is compared with the underlying operating system secxirity 
database. Neither does this language disclose that if the underlying operating system 
security database verifies the user with access to the second level of access, then the 
switch user program switches the user to the second level of access. Thus, He does 
not disclose all of the limitations of claims 6, 17, 19, 22, 25, 34, 44, 46, 49, 52, 61, 
71, 73, 76 and 79, and tiius He does not anticipate claims 6, 17, 19, 22, 25, 34, 44, 46, 
49, 52, 61, 71, 73, 76 and 79. M.P.E.P. §2131. 

Applicant fiirther asserts that He does not disclose "wherein said application 
fi-amework security database stores system operator information, wherein said 
application framework security database defines at least one of the following: users, 
passwords, groups of users and application specific authorization" as recited in claim 
7 and similarly in claims 33 and 60. The Examiner cites column 2, lines 25-32 of He 
as disclosing the above-cited claim limitation. Paper No. 8, page 6. Applicant 
respectfiiUy traverses and asserts that He instead discloses a single sign-on that allows 
a user to log-on only once at a user station and a security server that will, in tum, 
automatically log the user on to all the network elements that the user is authorized to 
access. There is no language in the cited passage that discloses an application 
framework security database that stores system operator information. Neither is there 
any language in the cited passage that discloses where such an application framework 
security database defines users, passwords, groups of users or application specific 
authorization. Thus, He does not disclose all of the limitations of claims 7, 33 and 60, 
and thus He does not anticipate claims 7, 33 and 60. M.P.E.P. §2131. 
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Applicant further asserts that He does not disclose "wherein said switch user 
program switches said user to said second level of access by modifying an underlying 
operating system's registry" as recited in claim 8 and similarly in claims 13, 35, 40, 
62 and 67. AppHcant further asserts that He does not disclose "wherein said switch 
user program switches said user to said second level of access by modifying an 
xmderlying operating system's registry" as recited in claim 20 and similarly in claims 
47 and 74. Applicant further asserts that He does not disclose "wherein said switch 
user program switches said user to said second level of access by modifying an 
underlying operating system's registry" as recited in claim 26 and similarly in claims 
53 and 80. The Examiner cites column 5, lines 41-48 and column 15, lines 52-53 of 
He as disclosing the above-cited claim limitations. Paper No. 8, page 8. Applicant 
respectfully traverses. 

He instead discloses that for the user privilege control module, a user privilege 
determines the set of network elements a user can access. Column 5, lines 41-42. He 
further discloses that all user account and network element data are maintained in a 
database, called DCE registry, at the SS node. Column 15, lines 52-54. 

There is no language in the cited passages that discloses switching a user to a 
second level of access. Neither is there any language in the cited passages that 
discloses switching a user to the second level of access by modifying an underlying 
operating system's registry. Thus, He does not disclose all of the limitations of claims 
8, 13, 20, 26, 35, 40, 47, 53, 62, 67, 74 and 80, and thus He does not anticipate claims 
8, 13, 20, 26, 35, 40, 47, 53, 62, 67, 74 and 80. M.P.E.P. §2131. 

Applicant further asserts that He does not disclose "wherein if said logon 
input is entitled to a second level of access according to said application framework 
security database, then the method further comprises the step of: generating an 
indication of said second level of access" as recited in claim 1 1 and similarly in 
claims 38 and 65. Applicant further asserts that He does not disclose "executing a 
switch user program to switch level of access to said second level of access by 
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selecting said indication of said second level of access" as recited in claim 12 and 
similarly in claims 39 and 66. Applicant further asserts that He does not disclose 
"selecting an indication of a second level of access" as recited in claim 15 and 
similarly in claims 42 and 69. The Examiner cites colunm 10, line 58 - coliimn 11, 
line 10 of He as disclosing the above-cited claim limitations. Paper No. 8, page 8. 
Applicant respectfully traverses. 

He instead discloses that the SSO Indication Digit specifies whether SSO is 
allowed for a user. Colunm 10, lines 58-59. He further discloses that if the indication 
is that the user is not allowed, the list following it shall be ignored in its entirety. 
Colunm 10, lines 59-61. He further discloses that if the user is allowed, then the 
existence of an item for the specified network element in the list determines whether 
the user is allowed the SSO capability to that particular network element. Colimm 10, 
lines 61-63. 

There is no language in the cited passage that discloses that if the logon input 
is entitled to a second level of access according to an application fi-amework security 
database, then an indication of a second level of access is generated. Neither is there 
any language in the cited passage that discloses executing a switch user program to 
switch a level of access to a second level of access by selecting the indication of the 
second level of access. Neither is there any language in the cited passage that 
discloses selecting an indication of a second level of access. Thus, He does not 
disclose all of the limitations of claims 11, 12, 15, 38, 39, 42, 65, 66 and 69, and thus 
He does not anticipate claims 1 1, 12, 15, 38, 39, 42, 65, 66 and 69. M.P.E.P. §2131. 

Applicant further asserts that He does not disclose "transferring said logon 
input to said imderlying operating system for verification" as recited in claim 18 and 
similarly in claims 45 and 72. The Examiner cites colxmm 5, lines 8-15 of He as 
disclosing the above-cited claim limitation. Paper No. 8, page 7. Applicant 
respectfully traverses and asserts that He instead discloses that a request is sent to a 
xxser station requesting a user identifier and a password. Column 5, lines 7-9. He 
further discloses that the user information will be checked against the information in 
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the user profile of a central security database at a security server. Column 5, lines 9- 
11. He further discloses that a network establishes mutual trust between an 
authenticated user and a specific mutual trust between an authenticated user and a 
specific NE the user requests to access. Column 5, lines 11-13. He fiirther discloses 
that the network authentication assures the user that the correct NE is accessed. 
Column 5, lines 13-15. However, there is no language in the cited passage that 
discloses transferring a logon input to an underlying operating system for verification. 
Thus, He does not disclose claims 18, 45 and 72, and thus He does not anticipate 
claims 18, 45 and 72. M.P.E.P. §2131. 

As a result of the foregoing. Applicant respectfiiUy asserts that not each and 
every claim limitation was foimd within the cited prior art reference, and thus claims 
1-8, 10-13, 15-20, 22, 23, 28-35, 37-40, 42-47, 49, 50, 55-62, 64-67, 69-74, 76 and 77 
are not anticipated by He. 
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III. CONCLUSION: 

As a result of the foregoing, it is asserted by Applicant that claims 1-81 in the 
Application are in condition for allowance, and Applicant respectfully requests an 
allowance of such claims. Applicant respectfully requests that the Examiner call 
Applicant's attorney at the below listed number if the Examiner believes that such a 
discussion would be helpful in resolving any remaining issues. 
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